4 ms·
Languages aren't inherently secure or insecure. In any case, nobody was accusing Node.js of being insecure here. JS is not "the only language that is secure en
by johnmaguire2013 11y ago
Languages aren't inherently secure or insecure. In any case, nobody was accusing Node.js of being insecure here.
JS is not "the only language that is secure enough to run universally in every browser on the planet." In fact, JS has had many, many security issues in browsers.
Rather, JS is the only language nearly every browser on the planet has implemented in the browser (hopefully sandboxed!)
- gragas 11y ago>Languages aren't inherently secure or insecure. This is just not true.
- kcbanner 11y agoExplain?
- smt88 11y agoA language's specification can forbid you from doing things that you probably didn't intend to do. Rust is an entire language intended to be safer by design (as opposed to C, which is the cause of a lot of secure issues). You can write less safe code in Rust, but you have to tell the compiler that you're doing it on purpose. It's also much, much easier to introduce bugs in certain languages because of the way they handle errors, or because the syntax is confusing and ambiguous. Even permissive handling of boolean logic, like what you get in PHP/JavaScript ("0" == true, for example) can result in massive security holes.
- gragas 11y agoAs another example, Go's := makes it much harder to do things you aren't intending to do.